Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/fq3oZ3ceM4EXg3_8f-DiSi8b4YM.roa
File:                     fq3oZ3ceM4EXg3_8f-DiSi8b4YM.roa (raw, json)
Hash identifier:          GWn+zTYoxeFHpKco+TBEDUfPUNyOk0SOVUxJb0RTywI=
Subject key identifier:   7E:AD:E8:67:77:1E:33:81:17:83:7F:FC:7F:E0:E2:4A:2F:1B:E1:83
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       0192D5806EF7C1F4E1CD539AA40BEE7F42D0
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/fq3oZ3ceM4EXg3_8f-DiSi8b4YM.roa
Signing time:             Mon 28 Oct 2024 23:40:16 +0000
ROA not before:           Mon 28 Oct 2024 23:40:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214145
IP address blocks:        2a01:e140::/44 maxlen: 48
                          2a01:e140::/48 maxlen: 48
                          2a01:e140:1::/48 maxlen: 48
                          2a01:e140:2::/48 maxlen: 48
                          2a01:e140:a::/48 maxlen: 48
                          2a01:e140:10::/44 maxlen: 48

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 11:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d5:80:6e:f7:c1:f4:e1:cd:53:9a:a4:0b:ee:7f:42:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Oct 28 23:40:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7eade867771e338117837ffc7fe0e24a2f1be183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:1a:83:71:76:fe:13:03:2f:e6:2a:4a:40:
                    58:40:02:e5:94:10:dc:ac:c7:e3:d5:05:7b:0e:75:
                    90:d0:cd:26:e8:d9:89:33:88:e4:24:d7:ac:dd:a0:
                    41:7d:b2:ef:02:cd:6d:7d:85:db:f6:e3:de:9a:89:
                    f5:37:c4:15:6e:fd:d2:83:67:3b:c2:0d:6a:e7:a4:
                    e4:35:f3:5e:c4:c2:cf:3f:96:db:d3:9f:7f:20:1e:
                    35:eb:d9:fe:08:21:39:e0:e3:5a:0f:98:e9:42:b9:
                    9a:6b:a8:e0:1c:9c:7d:6d:5d:12:6f:4a:ef:3c:c4:
                    3f:8d:7a:e6:6f:32:b7:06:a8:85:a5:47:3c:10:85:
                    48:5e:57:f7:f3:a9:70:20:17:12:08:82:fa:4e:75:
                    53:f6:73:73:d7:95:14:80:4d:34:26:cc:03:14:f8:
                    f1:9c:fd:37:61:09:ae:8f:b6:17:b4:93:de:c8:68:
                    0c:81:21:02:b7:9f:a7:db:91:a9:a4:3e:b6:fc:65:
                    db:77:27:34:35:bb:e0:19:d2:cf:00:b5:77:7e:dd:
                    22:05:29:7c:51:2d:03:c8:51:cb:c4:ed:24:aa:22:
                    a9:03:21:5e:8c:5c:7c:34:57:d7:4e:5f:78:80:01:
                    45:97:d0:97:42:4a:0d:19:8d:e1:d5:06:00:ad:be:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:E8:67:77:1E:33:81:17:83:7F:FC:7F:E0:E2:4A:2F:1B:E1:83
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/fq3oZ3ceM4EXg3_8f-DiSi8b4YM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:e140::/43

    Signature Algorithm: sha256WithRSAEncryption
         8b:5d:c6:3e:23:13:10:83:7d:44:db:be:f2:24:38:e1:49:de:
         43:b4:49:07:83:b9:17:34:77:5a:50:c6:4a:c4:36:ca:5f:b9:
         8d:71:42:61:10:bc:4b:69:1f:4c:d9:b1:d3:00:c6:dd:96:25:
         88:07:82:9b:86:dc:4e:2b:d3:c9:d7:55:3d:2b:79:61:98:7b:
         5d:19:bb:3e:6e:ab:44:af:8a:04:ef:34:5c:14:99:84:4b:00:
         89:da:1e:ce:7c:16:83:f8:76:a9:87:76:f2:6c:23:d1:88:f2:
         d6:b6:f3:93:6c:71:a0:4b:ea:ff:57:4c:2a:25:81:8a:c3:57:
         01:73:a6:8d:55:28:9f:8b:d7:d5:a0:54:bc:a4:64:0b:9e:13:
         f2:f9:f5:0c:46:fe:ca:85:4c:f8:a6:2c:35:c1:fe:1a:33:87:
         6c:9a:26:d7:4d:8b:5f:2d:db:ab:dd:5d:23:e0:e8:8d:9c:f9:
         00:22:37:e9:d3:9b:0f:74:77:ad:8a:07:ff:00:5f:b3:54:95:
         27:27:ee:0c:f8:15:ba:c2:d0:8f:35:04:de:82:2c:13:9a:95:
         d5:b7:c7:c8:f1:b9:80:70:b1:1a:8a:73:a1:6d:26:0f:9c:70:
         cd:58:09:58:cd:c9:ad:00:81:e5:a1:77:84:ec:b8:0b:cd:3a:
         4f:0b:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----